From: Chen Hanxiao Date: Sun, 21 Jan 2018 14:39:34 +0000 (+0800) Subject: libvirtd: clarify the TLS conf default value setting X-Git-Tag: v4.1.0-rc1~329 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=9d34af1a6b671a4df1c73eea46072bddf6b26b5f;p=thirdparty%2Flibvirt.git libvirtd: clarify the TLS conf default value setting Provide more details related to the requirement that setting one of the values requires setting all of them. Signed-off-by: Chen Hanxiao Reviewed-by: John Ferlan --- diff --git a/daemon/libvirtd.conf b/daemon/libvirtd.conf index 8e0c0d96d2..91b3f47dec 100644 --- a/daemon/libvirtd.conf +++ b/daemon/libvirtd.conf @@ -182,6 +182,20 @@ # TLS x509 certificate configuration # +# Use of TLS requires that x509 certificates be issued. The default locations +# for the certificate files is as follows: +# +# /etc/pki/CA/cacert.pem - The CA master certificate +# /etc/pki/libvirt/servercert.pem - The server certificate signed with +# the cacert.pem +# /etc/pki/libvirt/private/serverkey.pem - The server private key +# +# It is possible to override the default locations by altering the 'key_file', +# 'cert_file', and 'ca_file' values and uncommenting them below. +# +# NB, overriding the default of one location requires uncommenting and +# possibly additionally overriding the other settings. +# # Override the default server key file path #